On Wed, 31 May 2006, jamal wrote: > To also answer your other email: > Look at security/selinux/nlmsgtab.c for example for NETLINK_ROUTE > and compare with NETLINK_GENERIC to see the hole. I was suggesting if > we started by just adding checks for NETLINK_GENERIC first in those > tables (currently lacking), that would be a good start.
They're currently mediated as a generic netlink socket type at a higher level: they're not unmediated, just not fine grained enough to know what kind of message is being sent. -- James Morris <[EMAIL PROTECTED]> - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
